$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: 2LU7Y0moCmBnL/r3AfpbFK/eSQ/TmNKtZoXwvOQuR/w= Subject key identifier: 69:20:27:75:84:B6:CA:F0:F2:D8:46:B9:E8:E1:E8:3F:3D:56:77:E0 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 0513 Signing time: Thu 16 Apr 2026 23:31:47 +0000 Manifest this update: Thu 16 Apr 2026 23:31:46 +0000 Manifest next update: Thu 23 Apr 2026 23:31:46 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: SJ4M+0cBwL7Jw3jSup2EGdJIWHF7sei9/bQ/GezFZkM=) 2: E097013E910C11EFB994E187C4F9AE02.roa (hash: ZdZHwag+6Cd1JHK+9hW+Jbti2LN6Ngqb+sChSvSjYdc=) 3: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qA7mB7J1Wr5PxdKSeV/plvT1JHfQHozWTf8vXejp5kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Apr 16 23:31:46 2026 GMT Not After : Apr 23 23:31:46 2026 GMT Subject: CN=69e17162-26ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:2f:21:12:f6:5a:0a:23:e5:b9:a0:57:2d: a5:b9:0b:1b:4d:77:2f:b2:b6:fa:6d:97:90:e2:af: 8e:6d:19:9a:7c:20:20:f0:28:f6:b5:2e:40:55:8d: b0:34:08:c1:40:ab:15:3e:67:8c:fa:52:e0:80:db: 67:1f:76:d3:4c:69:01:16:e1:af:ec:3d:c7:00:d1: 81:5b:71:7c:5e:28:75:20:4f:7b:da:1d:93:2b:42: e7:8b:7e:04:17:5a:fa:57:f9:38:52:3a:cb:1d:94: 0c:96:ed:09:d2:aa:82:f8:97:4c:90:96:3e:7a:f3: 40:3c:3c:7c:9b:ec:b9:56:7a:49:73:05:77:36:7e: ad:78:e6:b7:cd:51:26:9c:57:71:26:f8:84:33:b8: 10:06:5a:aa:5f:6b:94:a5:1b:83:2c:16:ce:8d:d2: 43:e7:56:04:ba:b6:49:8f:85:2c:d2:e9:8d:e6:e0: a0:4e:57:38:57:51:40:e8:ab:13:6d:14:9a:48:3f: 83:b7:b2:0c:0b:4d:fd:bd:bc:a8:a4:c3:15:e1:45: e1:54:34:5a:de:80:12:e8:dd:3a:bf:fa:b2:8c:ed: 16:a1:2f:19:77:51:eb:03:ab:77:84:f9:75:bb:bc: b3:ea:19:74:2f:ea:24:8b:38:32:95:09:57:54:61: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:20:27:75:84:B6:CA:F0:F2:D8:46:B9:E8:E1:E8:3F:3D:56:77:E0 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d1:8b:96:b9:77:09:1a:27:40:5d:78:93:5f:e6:6a:71:ec: 8f:36:ed:dc:41:01:61:d6:a9:a1:35:36:2e:ad:d0:0d:de:d4: f3:9c:96:2d:b0:87:e2:ae:ab:53:64:a5:76:4b:88:f1:4f:37: 81:eb:f7:0a:bf:c7:7a:5c:c1:ac:22:d3:be:27:1f:f6:92:af: 8d:71:80:74:9e:11:a2:94:d1:22:93:6e:c5:65:7c:71:eb:09: 0c:db:25:46:0b:76:c5:04:86:45:f3:21:15:cf:6d:39:c2:61: 77:57:02:b9:1d:4b:1b:45:4e:9f:47:4f:05:8d:81:2c:71:2f: 8a:4f:f1:92:59:ad:68:85:2d:5b:7a:d9:46:fa:9f:72:41:64: 3a:8d:33:3c:d8:6a:3c:66:d5:f3:66:ae:0a:1d:c8:17:52:ac: 8b:c6:56:5e:05:2b:ce:c5:c3:ee:a5:3f:6f:8b:34:24:05:89: 29:91:5a:7a:7d:68:bb:cc:33:29:e5:8c:50:f7:0f:19:17:9f: 16:a5:5e:91:c9:73:39:bd:01:79:9f:af:83:eb:b3:40:f6:ae: a9:96:a1:b0:45:87:20:0b:f4:7b:cf:1f:2b:c3:43:e9:f6:e7: e1:25:07:dd:a0:ea:d3:4a:9e:ee:4e:ef:c5:7d:f7:5b:a4:14: 51:fb:40:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjYwNDE2MjMzMTQ2WhcNMjYwNDIzMjMzMTQ2WjAYMRYwFAYD VQQDEw02OWUxNzE2Mi0yNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodIvIRL2Wgoj5bmgVy2luQsbTXcvsrb6bZeQ4q+ObRmafCAg8Cj2tS5AVY2w NAjBQKsVPmeM+lLggNtnH3bTTGkBFuGv7D3HANGBW3F8Xih1IE972h2TK0Lni34E F1r6V/k4UjrLHZQMlu0J0qqC+JdMkJY+evNAPDx8m+y5VnpJcwV3Nn6teOa3zVEm nFdxJviEM7gQBlqqX2uUpRuDLBbOjdJD51YEurZJj4Us0umN5uCgTlc4V1FA6KsT bRSaSD+Dt7IMC039vbyopMMV4UXhVDRa3oAS6N06v/qyjO0WoS8Zd1HrA6t3hPl1 u7yz6hl0L+okizgylQlXVGEcrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkgJ3WE tsrw8thGuejh6D89VnfgMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ9GLlrl3CRonQF14k1/manHsjzbt3EEBYdapoTU2Lq3QDd7U85yWLbCH4q6r U2SldkuI8U83gev3Cr/HelzBrCLTvicf9pKvjXGAdJ4RopTRIpNuxWV8cesJDNsl Rgt2xQSGRfMhFc9tOcJhd1cCuR1LG0VOn0dPBY2BLHEvik/xklmtaIUtW3rZRvqf ckFkOo0zPNhqPGbV82auCh3IF1Ksi8ZWXgUrzsXD7qU/b4s0JAWJKZFaen1ou8wz KeWMUPcPGRefFqVekclzOb0BeZ+vg+uzQPauqZahsEWHIAv0e88fK8ND6fbn4SUH 3aDq00qe7k7vxX33W6QUUftAxA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:08:25 2026 by rpki-client